This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft File: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json) Hash identifier: 7h/1juFVhdvCnEq/qNXjBlSrV49DfjoUHVjCGkn8zVE= Subject key identifier: A4:16:B6:5E:BC:01:27:07:55:3A:31:1D:E6:DB:D8:74:15:B5:20:EB Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C Certificate issuer: /CN=153d757b77067befd9446694748ad2b04e97b38c Certificate serial: 019B2B8AEE9A14C2E8F0E99736F7A04BC425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 09:01:23 +0000 Manifest this update: Wed 17 Dec 2025 09:01:23 +0000 Manifest next update: Thu 18 Dec 2025 09:01:23 +0000 Files and hashes: 1: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: JQ47Yh9xMva7FizUoBhOf5s237xvHPurY9qfJGrcvng=) 2: r7lFXPa807MfacPLjTifqcio5eE.roa (hash: uWVAVnCuqwCuf5rQTJ4k2G3R8ObiUvivLPLiht6CJGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:ee:9a:14:c2:e8:f0:e9:97:36:f7:a0:4b:c4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c Validity Not Before: Dec 17 09:01:23 2025 GMT Not After : Dec 18 09:01:23 2025 GMT Subject: CN=a416b65ebc012707553a311de6dbd87415b520eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:96:fe:8f:c7:11:62:e9:04:87:56:b1:d0: 3d:cd:b2:6c:70:9b:b9:e5:f6:22:33:c7:e8:7d:e3: 27:16:d8:fb:b3:79:d2:1c:da:14:e0:e9:38:3b:c7: 92:0d:6c:78:6e:fb:4a:88:cb:f7:a9:15:5f:3f:14: 9c:ee:6b:ae:26:a1:ac:65:60:58:25:cd:29:0f:74: c7:e2:b5:02:b9:3a:9b:84:09:ca:99:c6:43:07:3f: de:69:77:8f:a7:45:e0:9f:27:e5:e1:1b:a9:69:8f: 79:79:19:0c:69:ac:64:ec:d2:bb:22:b7:e4:1e:1f: 1b:11:ea:d5:12:07:24:1e:45:67:71:e5:3a:e5:a2: dd:9c:cf:fa:6b:20:27:e0:dd:6a:77:35:c9:08:f4: 47:1f:e2:f1:e6:8e:59:a6:ca:31:33:dc:3d:87:cf: fe:e8:79:b2:f6:44:15:cd:b5:52:35:42:64:72:03: e5:05:4f:ef:3e:a4:a2:99:24:4e:a8:69:ef:59:76: ab:2c:1e:ff:ab:a1:88:b7:41:0b:99:19:02:21:e4: 97:d1:d0:2c:68:d1:5a:e2:62:a7:2c:92:1f:e4:04: a5:0c:21:f4:19:89:2b:7d:c0:5e:e7:02:cf:6d:67: 98:51:bf:b8:7c:7c:61:b5:9c:dc:d6:59:b5:17:51: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:16:B6:5E:BC:01:27:07:55:3A:31:1D:E6:DB:D8:74:15:B5:20:EB X509v3 Authority Key Identifier: keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:37:d0:ae:64:0c:43:2f:ab:6c:d9:67:c7:d3:e3:4d:be:63: 7f:85:1d:c9:52:a2:36:4c:66:37:62:17:20:ef:d7:3c:51:41: ff:d1:5c:ea:a6:79:ca:b6:9f:ee:10:89:de:57:33:c6:3f:35: 65:85:08:9b:8c:c8:d7:07:a2:c6:bc:4c:c4:9a:af:e7:40:73: da:6f:91:8b:43:77:ba:27:a5:b2:3a:99:c2:53:ff:19:a9:15: a9:ef:eb:92:47:9a:c1:49:ce:65:b3:c1:23:17:0b:21:03:74: ca:76:51:86:b3:07:f1:83:77:e4:61:c4:3d:21:11:ee:86:3d: 5d:ec:22:a9:10:cc:3e:a7:d8:4a:2c:1a:6c:5c:69:12:6e:12: 62:28:7f:89:58:ed:7c:5b:b9:62:c7:20:23:32:57:57:89:11: 4c:14:52:1a:5b:c9:69:0a:5d:f4:f2:6a:ef:b6:40:27:8b:58: 74:22:cf:f6:6e:ff:a4:07:23:16:a8:d8:31:fa:a4:9b:79:78: 0f:da:66:26:6f:ff:16:ca:ce:47:93:ae:3c:33:e8:e9:97:3d: 91:94:62:b2:3e:d1:28:c6:d6:7e:fd:15:35:62:f5:77:33:1c: fc:26:cf:90:0c:fe:ef:ac:4b:6b:70:7c:80:1f:80:af:ab:d2: c3:14:bd:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriu6aFMLo8OmXNvegS8QlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1M2Q3NTdiNzcwNjdiZWZkOTQ0NjY5NDc0OGFkMmIwNGU5 N2IzOGMwHhcNMjUxMjE3MDkwMTIzWhcNMjUxMjE4MDkwMTIzWjAzMTEwLwYDVQQD EyhhNDE2YjY1ZWJjMDEyNzA3NTUzYTMxMWRlNmRiZDg3NDE1YjUyMGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y6W/o/HEWLpBIdWsdA9zbJscJu5 5fYiM8fofeMnFtj7s3nSHNoU4Ok4O8eSDWx4bvtKiMv3qRVfPxSc7muuJqGsZWBY Jc0pD3TH4rUCuTqbhAnKmcZDBz/eaXePp0Xgnyfl4RupaY95eRkMaaxk7NK7Irfk Hh8bEerVEgckHkVnceU65aLdnM/6ayAn4N1qdzXJCPRHH+Lx5o5ZpsoxM9w9h8/+ 6Hmy9kQVzbVSNUJkcgPlBU/vPqSimSROqGnvWXarLB7/q6GIt0ELmRkCIeSX0dAs aNFa4mKnLJIf5ASlDCH0GYkrfcBe5wLPbWeYUb+4fHxhtZzc1lm1F1G39QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQWtl68AScHVToxHebb2HQVtSDrMB8GA1UdIwQY MBaAFBU9dXt3Bnvv2URmlHSK0rBOl7OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYt MDE5ZTFmODQwM2RkLzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi84YTk0YjktNzBmZS00NmZmLWE0ZTYtMDE5ZTFmODQwM2Rk LzEvRlQxMWUzY0dlLV9aUkdhVWRJclNzRTZYczR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTfQrmQM Qy+rbNlnx9PjTb5jf4UdyVKiNkxmN2IXIO/XPFFB/9Fc6qZ5yraf7hCJ3lczxj81 ZYUIm4zI1weixrxMxJqv50Bz2m+Ri0N3uielsjqZwlP/GakVqe/rkkeawUnOZbPB IxcLIQN0ynZRhrMH8YN35GHEPSER7oY9XewiqRDMPqfYSiwabFxpEm4SYih/iVjt fFu5YscgIzJXV4kRTBRSGlvJaQpd9PJq77ZAJ4tYdCLP9m7/pAcjFqjYMfqkm3l4 D9pmJm//FsrOR5OuPDPo6Zc9kZRisj7RKMbWfv0VNWL1dzMc/CbPkAz+76xLa3B8 gB+Ar6vSwxS9LA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:08:42 2025 by rpki-client